Owen IT Solutions

01/09/2026

Google put out an emergency Chrome update in June 2026 for a flaw attackers were already using. Just visiting a bad web page is enough to get hit, no clicking needed. Click the three dots, Help, About Google Chrome, then Relaunch. Updates only take effect once you restart.

Google released security updates for 74 Chrome vulnerabilities, including CVE-2026-11645, a high-severity V8 out-of-bounds memory access flaw.

31/08/2026

Your website is online 24/7 for anyone to poke at, and most owners never think about its security. Make sure it uses HTTPS, keep its software and plugins updated (outdated plugins are the top way sites get hacked), and lock down the admin login with MFA and a strong password.

30/08/2026

Hit with ransomware and your files are locked. Do you pay? Before paying: it doesn't guarantee you get your files back, and in some cases it can break the law. Start with your backups instead. If you can restore yourself, you may not need to pay. Plan this before it happens.

29/08/2026

Don't let your router or firewall get old. These devices have a shelf life, and once they stop getting security updates, your hacking risk goes up. Ask your IT for a list of your network gear and whether each piece is still supported. Anything past end of life needs replacing.

28/08/2026

The face on your video call might not be real. Deepfakes can now fake a familiar face and voice live, and people have been talked into wiring out fortunes. If someone on a call pushes you to move money fast, verify another way first. Call them back on a number you already have.

27/08/2026

You're probably holding way more customer data than you need: old card numbers, files from clients who left years ago. If you don't need it, it's just data for a hacker to steal. Delete what you've no reason to keep, old payment details first. You can't lose what you don't have.

26/08/2026

Attackers don't always need your password. They click 'forgot password' and reset it through your recovery email or security questions, and those answers are often on your social media. Lock down your recovery email with MFA, and make up fake answers to security questions.

04/08/2026

If a website tells you to press Windows+R and paste in a command to 'verify you're human,' close the tab. That's a scam called ClickFix, and it installs malware the second you hit Enter. No real website ever asks you to run a command. CAPTCHAs just make you click pictures.

ClickFix attacks are delivering BabaDeda, Lorem Ipsum, and Potemkin loaders to deploy stealers, RATs, and ransomware-linked tooling.

03/08/2026

If you open an email attachment that looks like an image and it asks you to log in, close it.

There's a phishing trick going around this year that hides inside picture files, and it gets past the filters most businesses rely on.

It uses a file type called SVG. It's an image format, but unlike a normal photo, it can carry code inside it.

Someone double-clicks the attachment expecting a picture. Instead it opens in their browser, runs, and sends them to a fake Microsoft login page built for their exact email.

The email system lets it through because, as far as it can tell, it's just an image. Researchers flagged a wave of these in early June.

A picture should never send you to a login screen. So if you open an attachment and it asks for your password, don't type it in.

And be careful with any image you weren't expecting, especially one ending in .svg.

People almost never send those on purpose.

Ask your IT provider to block SVG attachments. Hardly any business needs to receive them, so blocking them costs you nothing.

03/08/2026

Your cyber insurance might not pay out. Insurers now require MFA, real endpoint protection, tested backups, and security training, and if you claimed to have them but didn't, they can deny the claim. Read your policy's conditions now, not after an attack.